After over a year, the ICO has decided that DVLA is
not acting in accordance with the Data Protection Act 2018/GDPR (and DPA98 now repealed).
It is known that DVLA has taken legal advice (but refuses to release this to the public).
What happens next?
I would expect the ICO to serve an enforcement notice on the DVLA. This can be appealed to the Tribunal.
If the DVLA has been releasing keeper details for say, 5 years to parking cos. etc. at the rate of 3m per year that is 15m in total.
If each claim for damages is worth £50 then that's 3m x 50 = seven hundred fifty million pounds (plus court fees).
How would the DVLA pay for that? That's a lot of private number plate auction sales.